Privacy Policy
Last updated: June 20, 2026
1. About This App
TogetherMindsAI is an AI assistant for licensed clinicians, operated by Global Business Consulting, Inc. (GBCai4org). It is not a licensed mental health service and does not provide medical advice, diagnosis, or treatment.
2. What We Collect
- Session messages — the text you send during a session
- Spoken audio (only if you join audio) — transcribed to text in real time. The audio is not recorded by default (only the text is kept). If recording is used, it happens only with every participant's consent and can be declined or stopped at any time.
- Session ID — a randomly generated code used to identify your session
- Display name — the name you choose within a session (need not be your real name)
- Usage metadata — timestamps, session mode (solo/couple/group), and rate-limiting data
We do not collect your name, email address, phone number, or any account credentials. No account is required to use the app.
3. How We Store It
Your data is encrypted at rest. It is stored in a Google Cloud SQL database in the United States, where all data is encrypted at the storage layer with AES-256. In addition, sensitive fields — message content, session summaries, display names, and session labels — carry a second layer of application-level encryption before they are written to the database.
4. How Long We Keep It
Clinician-led sessions are clinical records, retained for up to 6 years, consistent with clinical-record retention practices. Audit logs are also retained for 6 years as required by applicable regulations.
If a session is recorded, the audio/video recording is kept for 30 days and then permanently deleted. The written transcript is kept as the clinical record for up to 6 years.
5. Service providers (sub-processors)
We do not sell, rent, or share your data with third parties. The following service providers process data on our behalf, each under a signed Business Associate Agreement (HIPAA):
- Google LLC (Google Cloud) — hosting, database, file storage, and our self-hosted audio/video server. Receives: all stored data. (google.com/privacy)
- AssemblyAI — converts session speech to text (live transcription). Receives: session audio. (assemblyai.com)
- Anthropic (Claude) — powers the AI co-pilot, session summaries, and translation assistance. Receives: session transcript text. (anthropic.com/privacy)
Our real-time audio/video runs on open-source software (LiveKit) that we host ourselves on Google Cloud; the LiveKit company does not receive your data.
6. About the AI (AI transparency)
This service uses artificial intelligence to (1) transcribe spoken sessions to text, (2) provide a private "co-pilot" that suggests questions, techniques, and reference information to your clinician, and (3) generate session summaries.
The AI supports your clinician — it does not diagnose, treat, or make decisions about your care. A licensed professional reviews and controls everything; you are always interacting with a human clinician, assisted by AI. In a crisis, contact your clinician or emergency services (US: call or text 988).
- Intended purpose: assistive decision support for a licensed clinician during a session — not an autonomous or stand-alone medical device.
- Human oversight: a clinician supervises the session and reviews all AI output; automated risk/crisis detection only surfaces resources to the client and an alert to the clinician — it never acts on its own.
- Limitations: AI transcription and suggestions may be incomplete or contain errors, and any reference codes are decision-support, not diagnoses; the clinician verifies them.
- Our role: we deploy a third-party general-purpose AI model (Anthropic) within this service. Your data is never used to train any AI model.
- Record-keeping: AI-related events (suggestions generated, risk alerts, transcript access) are recorded in a tamper-evident audit log.
- Monitoring & concerns: we monitor the system and act on issues; report concerns to privacy@onlinegbc.com.
7. Age Requirement
This app is intended for users aged 18 and older. We do not knowingly collect data from minors.
8. Your Rights
To request access to or deletion of a session's data, contact the clinician who led the session (the record-holder), or us, and provide the Session ID. Note that clinical records may be subject to retention obligations that limit deletion.
9. Crisis Resources
If you are in crisis, please contact a real person immediately:
- US: call or text 988, or text HOME to 741741
- Worldwide: findahelpline.com or befrienders.org
10. Contact
For privacy questions or data deletion requests:
Global Business Consulting, Inc. (GBCai4org)
Email: privacy@onlinegbc.com
11. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top will reflect any changes.